CVE-2023-3147

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin\categories\view_category.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231016.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 7, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-314709.8SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain functionCVE-2023-314719.8An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary softCVE-2023-314727.5An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on CVE-2023-314734.9An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on CVE-2023-314747.5An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary paramCVE-2023-314759.8An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item iCVE-2023-314767.5An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be creCVE-2023-314777.5A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrarCVE-2023-314787.5An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSCVE-2023-31488.8A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This issue affects some unknown proCVE-2023-314837.5tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to createCVE-2023-314848.1CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.